Also, in MAS, Object Structure security is enforced, so make sure to explicitly configure object structure security for the object structure you're using (mxapiasset) and grant the sig options to the user, who's API key you're using for authentication. ...